duplicate attribute value issue in idp 2.3.3

[Chad La Joie]

If its truly unintentional that you need to figure out who hacked your
IdP and added in extra data connectors.

But again, it doesn't matter, there is no guarantee, and never has
been, that the IdP won't release duplicate values.  Nor does the SP.
Nor does the SAML spec require it.  So if the app is breaking because
it receives duplicate values then it has a bug.

On Tue, Aug 2, 2011 at 08:14, Leif Johansson <leifj at sunet.se> wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> On 08/02/2011 02:01 PM, Chad La Joie wrote:
>> There was some code in the IdP before that was de-duplicating values
>> incorrectly and causing another bug.  That code has been removed.
>> That code was there strictly as a performance optimization (less
>> values to have to evaluate and potentially encode).  However, we've
>> never said that the IdP will never release duplicates if you supply it
>> with duplicates.  If your application breaks because it finds the same
>> value more than once then you need to fix the application.
>
> Since its static values it doesn't sound like Viljo is (un)intentionally
> giving the resolver duplicate values.
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.11 (GNU/Linux)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
>
> iEYEARECAAYFAk436g4ACgkQ8Jx8FtbMZnf87wCgwKDo6G4KIndbHfy5/HQU0JA4
> OekAnRA3aOl+MOvFtttchLobBkSaKPgM
> =MRZX
> -----END PGP SIGNATURE-----
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
>



-- 
Chad La Joie
www.itumi.biz
trusted identities, delivered